$ rpki-client -vvf repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft File: 286C9A362D81776DD721F49AC1EDBE51BF15D486.mft (raw, json) Hash identifier: JXnt8what9x0yQr18Ou2V/Zw7qKnOPCnbXMg69RPU/A= Subject key identifier: 69:37:EC:9C:5E:A3:48:19:3F:F3:E1:A4:F5:9A:2F:AC:DD:FB:6D:96 Authority key identifier: 28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 Certificate issuer: /CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Certificate serial: 34A51A8BEF4A14F62DC097C1A513D6C917ABCAFE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft Manifest number: 01C5 Signing time: Thu 05 Jun 2025 02:11:14 +0000 Manifest this update: Thu 05 Jun 2025 02:06:14 +0000 Manifest next update: Sun 08 Jun 2025 05:07:14 +0000 Files and hashes: 1: 286C9A362D81776DD721F49AC1EDBE51BF15D486.crl (hash: l2A1UjQUJchN5jWNq6Eb28cPis6AqILlQKZcZWpZg1g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.crl rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 05:07:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:a5:1a:8b:ef:4a:14:f6:2d:c0:97:c1:a5:13:d6:c9:17:ab:ca:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Validity Not Before: Jun 5 02:06:14 2025 GMT Not After : Jun 8 05:07:14 2025 GMT Subject: CN=6937EC9C5EA348193FF3E1A4F59A2FACDDFB6D96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:42:a5:f4:07:f0:41:46:84:35:10:21:2b:e8: 0d:92:62:b2:15:8d:39:db:b9:69:3d:31:0d:a6:a8: 51:54:10:d1:64:26:97:a6:a6:1b:f5:4d:d2:00:f5: 09:ae:3f:ee:e9:b7:5e:9d:1a:22:ba:e2:99:27:8a: 64:dd:0d:56:66:1b:06:18:b6:54:8b:17:22:af:b0: 81:f9:11:29:9c:a1:26:f4:b0:99:30:ea:a0:f0:01: 0c:20:ba:4e:b5:de:43:11:14:9d:4c:ef:a4:1b:f1: 1b:b2:cc:c2:cf:39:99:d5:22:13:86:c6:a7:0f:72: a4:4f:b5:95:c7:c6:31:f7:aa:03:f3:88:78:08:30: 1b:1a:0e:34:c3:bf:49:32:45:20:f1:c4:6d:d0:d0: f5:71:d6:a0:99:3f:78:ad:ff:b6:d0:6e:5f:83:95: 3e:05:7c:62:d2:65:96:6a:bb:a0:d3:ab:c4:99:b4: 5a:57:b4:f9:12:d4:fa:a6:2d:f6:2b:9b:48:6b:2a: fc:78:c6:13:7a:67:f1:02:40:bb:45:87:78:16:36: 32:c7:4f:c1:1e:3a:61:92:62:a9:3e:63:ee:29:2b: e6:ad:03:37:2b:07:b3:89:23:72:d2:f2:cd:1f:7f: 59:dd:41:bd:49:56:99:e1:fc:f0:8f:43:f4:71:be: d2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:37:EC:9C:5E:A3:48:19:3F:F3:E1:A4:F5:9A:2F:AC:DD:FB:6D:96 X509v3 Authority Key Identifier: keyid:28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:5f:7b:b6:eb:a0:8f:43:c8:77:76:64:f2:10:4a:72:16:24: 77:93:5a:58:27:70:c6:b6:f6:d8:4b:46:b0:8d:90:d8:2a:fb: 34:7c:21:a3:ec:51:5d:08:c2:f0:75:1f:5a:c6:d5:4e:a6:19: 4c:bb:b0:a2:d1:86:18:59:e2:2f:4b:7f:ea:b1:93:54:d4:92: 50:28:65:95:1a:65:8f:27:0a:df:88:99:44:c7:8d:af:62:f5: 52:0d:05:03:6d:01:ef:5e:38:b8:c4:fd:9b:2a:eb:1d:d4:05: b2:c6:23:15:80:7d:4f:e0:06:7d:76:94:70:ac:2b:bc:3e:1a: 77:df:22:f3:6d:ad:94:ab:ae:48:15:72:01:54:78:9d:34:6e: 16:b9:fa:d5:77:16:82:b3:2c:35:0d:06:5d:4b:01:10:6f:c8: 5d:3f:cd:24:c5:8f:49:7e:6d:1f:80:1c:7a:da:e8:c5:d9:cd: 41:40:a5:75:ed:46:5d:70:cc:0c:dd:dc:e3:4d:7c:0f:f7:5c: 84:6a:79:c5:f5:c4:18:0b:ce:6a:17:4e:12:e5:53:b7:f6:03: e4:dc:ef:31:b6:6c:c1:83:d2:d6:ef:2d:43:65:d1:28:29:fa: 79:aa:05:1d:da:81:f6:37:11:2f:0d:56:be:02:25:e4:0c:4f: 25:ae:0a:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNKUai+9KFPYtwJfBpRPWyReryv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJFNTFC RjE1RDQ4NjAeFw0yNTA2MDUwMjA2MTRaFw0yNTA2MDgwNTA3MTRaMDMxMTAvBgNV BAMTKDY5MzdFQzlDNUVBMzQ4MTkzRkYzRTFBNEY1OUEyRkFDRERGQjZEOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVQqX0B/BBRoQ1ECEr6A2SYrIV jTnbuWk9MQ2mqFFUENFkJpemphv1TdIA9QmuP+7pt16dGiK64pknimTdDVZmGwYY tlSLFyKvsIH5ESmcoSb0sJkw6qDwAQwguk613kMRFJ1M76Qb8RuyzMLPOZnVIhOG xqcPcqRPtZXHxjH3qgPziHgIMBsaDjTDv0kyRSDxxG3Q0PVx1qCZP3it/7bQbl+D lT4FfGLSZZZqu6DTq8SZtFpXtPkS1PqmLfYrm0hrKvx4xhN6Z/ECQLtFh3gWNjLH T8EeOmGSYqk+Y+4pK+atAzcrB7OJI3LS8s0ff1ndQb1JVpnh/PCPQ/RxvtLVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaTfsnF6jSBk/8+Gk9ZovrN37bZYwHwYDVR0j BBgwFoAUKGyaNi2Bd23XIfSawe2+Ub8V1IYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjEyNzRjNi03ODNjLTRmM2QtYTliNi03NWIzYjQ2Zjg1NGMvMC8yODZDOUEzNjJE ODE3NzZERDcyMUY0OUFDMUVEQkU1MUJGMTVENDg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJFNTFCRjE1 RDQ4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmYxMjc0YzYtNzgzYy00ZjNkLWE5 YjYtNzViM2I0NmY4NTRjLzAvMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJF NTFCRjE1RDQ4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALhfe7broI9DyHd2ZPIQSnIWJHeTWlgncMa2 9thLRrCNkNgq+zR8IaPsUV0IwvB1H1rG1U6mGUy7sKLRhhhZ4i9Lf+qxk1TUklAo ZZUaZY8nCt+ImUTHja9i9VINBQNtAe9eOLjE/Zsq6x3UBbLGIxWAfU/gBn12lHCs K7w+GnffIvNtrZSrrkgVcgFUeJ00bha5+tV3FoKzLDUNBl1LARBvyF0/zSTFj0l+ bR+AHHra6MXZzUFApXXtRl1wzAzd3ONNfA/3XIRqecX1xBgLzmoXThLlU7f2A+Tc 7zG2bMGD0tbvLUNl0Sgp+nmqBR3agfY3ES8NVr4CJeQMTyWuCuY= -----END CERTIFICATE-----Generated at Thu Jun 5 18:11:34 2025 by rpki-client